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Abstract 

The paper [Howard E. Brandt, "Conclusive eavesdropping in quantum 
key distribution," J. Opt. B: Quantum Semiclass. Opt. 7 (2005)] is 
generalized to include the full range of error rates for the projectively 
measured quantum cryptographic entangling probe, and also the full range 
of inconclusive rates for the entangling probe measured with the POVM 
receiver. 
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1 INTRODUCTION 

A design was recently given for an optimized entangling probe attacking the 
BB84 (Bennett-Brassard 1984) protocol of quantum key distribution and yield- 
ing maximum Renyi information to the probe pp, PJ. Probe photon polariza- 
tion states become optimally entangled with the signal states on their way be- 
tween the legitimate transmitter and receiver. Although standard von-Neumann 
projective measurements of the probe yield maximum information on the pre- 
privacy amplified key, if instead the probe measurements are performed with a 
certain positive operator valued measure, then the measurement results are con- 
clusive, at least some of the time [5] . It was assumed throughout that the error 
rate E induced by the probe in the legitimate signal was such that < E < 1/4 
for the projectively measured probe. Here we extend the analysis to cover the 
full range of theoretical interest, namely < E < 1/3. 



2 GENERALIZED ENTANGLING PROBE 



In the present work a generalization is given to include the full range of error 
rates, < E < 1/3, for the projectively measured quantum cryptographic 
entangling probe, and the full range of inconclusive rates, < i?? < 1, for the 
entangling probe measured with the POVM receiver. To accomplish this, the 
following sign choices must be made for the probe parameter /j, in Eqs. (26) and 
(27) of n 

(1) 



cos M = [(r + ^/2] 1 / 2 , 
sin// = sgn(l - 4E)[(1 - rf}/2] 1/2 , 



in which we define 

sgn(ir) = 

One also has the definition, Eq. (75) of [I]: 
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tj = [8E{1-2E)} 1/2 . 
In this case, the probe states \A\), \A 2 ), \ot+), and \a) of |3] become: 
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) = [(2 1 / 2 + l)(l + 7 ? ) 1/2 +sgn(l-4^)(2 1 / 2 -l)(l- ?7 ) 1/2 ] \w ) 

+ [sgn(l - AE) (2 1 / 2 + l) (1 - 7 ? ) 1/2 + (2V2 - l) (1 + ry) 1 / 2 ] |w 3 ) , 

} = [(2 1 / 2 -!) (1 + 7y) 1/2 + sgn(l - 4£) (2 1 / 2 + l) (l-ry) 1/2 j \w ) 
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n(l - AE) (2 1 / 2 - l) (1 - ^) 1/2 + (2 1 / 2 + l) (1 + V ) 1/2 } K) 



\a) 



sgn(l - 4E) (1 - V ) 1/2 - (1 + ?7) 1/z j K) 
+ [(1 + '7) V2 - sgn(l - 4£) (1 - V ) 1/2 ] \w 3 ) , 



a/2 
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respectively, where \wq) and \ws) are the orthonormal basis states in the two- 
dimensional Hilbert space of the probe. As in pQ, the upper sign choice in Eq. 



(23) of has been chosen. Note that Eqs. (5)-(9) are consistent with Eqs. 
(5)-(7) and (H)-(14) of for < E < 1/4, as must be the case. It then 
follows that Eqs. (l)-(4) of |3J, along with Eqs. (7)-(9) above, now apply for 
< E < 1/3. (Note that E = 1/3 corresponds to complete information gain by 
the quantum cryptographic entangling probe.) Also the probe and measurement 
implementations remain the same (as in pQ, [3]) with the initial state of the 
probe now given by Eq. (6) or (21) below. In obtaining the maximum Renyi 
information gain I* t by the probe, Eq. (23) of 0, from Eqs. (7) and (8) above 
and Eqs. (23) and (17) of 0] and the discussion following Eq. (75) of £Q, one 
first has 

7« t =log 2 (2-Q 2 ), (10) 
and one readily obtains for the overlap Q of correlated probe states: 



(a+|a_) _ 1 + 3sgn(l - AE)(1 - rj 2 ) 



21 1/2 



(11) 



(12) 



^ |a+||a-| 3 + sgn(l-4 J B)(l-r7 2 ) 1 /2 ' 

Then substituting Eq. (4) in Eq. (11), one obtains 

1 + 3sgn(l - 4£)((1 - AE) 2 ) 1 ' 2 
Q ~ 3 + sgn(l -4£)((1 -4S) 2 )V2 ' 

where we mean the positive square root; i.e. 

((1 -4£) 2 ) 1/2 = |1 -4E|. (13) 

On noting that 

sgn(l -4E)\1 -4E\ = 1 -4E, (14) 
and substituting Eqs. (13) and (14) in Eq. (12), one obtains 

Finally, substituting Eq. (15) in Eq. (10), one obtains Eq. (23) of namely, 



T opt = lo S2 



1 -3^ x 2 
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(16) 



for the full range of error rates, < -E < 1/3, as required. 

From Eq. (31) of [3], one also concludes that the full range of inconclusive 
rates i?? apply, namely < i?? < 1. In this regard, it is useful, for the imple- 
mentation of the entangling probe incorporating the POVM receiver to measure 
the probe, to parameterize the states \Ai) and IA2), and 77, and sgn(l — 4E) 
above, along with Eqs. (29) and (33) of 0, in terms of the inconclusive rate. 
Thus, using Eq. (31) of 3 , it follows that the parameter E is 
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Then the reflection coefficient R\ in the POVM receiver, Eq. (29) of |3J, becomes 

1 - R? 



Ri = 

1 + Rt 

Also, substituting Eq. (17) in Eqs. (3)-(6) above, one obtains 

_ 2[2(l-i??)] 1 /2 



(18) 
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Thus for the case of measurement of the probe with the POVM receiver, ac- 
cording to Eq. (17), E can be treated as a parameter ranging form to 1/3, 
and determined by the set inconclusive rate i??. Also, the reflection coefficient 
Ri of the POVM receiver must be set according to Eq. (18), by the inconclusive 
rate. Finally, according to Eq. (21), the initial state IA2) of the probe can be 
tuned to a set inconclusive rate of the POVM receiver. 

Finally, it is important to emphasize that, if the photon loss rate, due to 
attenuation in the key distribution channel between the probe and the legiti- 
mate receiver, equals the inconclusive rate i??, and only the conclusive states 
are relayed by the probe to the legitimate receiver, then the entangling probe 
together with the POVM receiver can obtain complete information on the pre- 
privacy-amplified key, once the polarization bases are announced in the public 
channel during reconciliation [3J. Also, to counter alteration in the attenuation 
due to the probe, the legitimate channel may be replaced by a more transparent 
one. One may therefore conclude that the BB84 protocol has a vulnerability 
very similar to the well-known vulnerability of the B92 (Bennett 1992) protocol 
[H]- El- [H< It is also possible that the popular Ekert protocol [B] has a sim- 
ilar vulnerability. It is important to emphasize that, because for the present 
implementation one has < E < 1/3, the inconclusive rate, according to Eq. 
(17), can range here from to 1, and can match a corresponding loss rate in the 
channel connecting the probe to the legitimate receiver. If the inconclusive rate 
-R? is chosen to match the loss rate in the channel connecting to the legitimate 
receiver, then the initial state of the probe must be tuned (using a polarizer 
located between the single-photon source and the target entrance port of the 
CNOT gate) to the value given by Eq.(21). 



3 CONCLUSION 

The conclusive entangling probe, which incorporates the POVM receiver to 
measure the quantum cryptographic entangling probe, is generalized to include 
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a full range of inconclusive rates. It follows that the inconclusive rate of the 
POVM receiver can match any photon loss rate in the key distribution channel, 
and the standard BB84 and Ekert protocols of quantum key distribution then 
have vulnerabilities analogous to the well-known vulnerability of the standard 
B92 protocol. 
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